CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1916 matches found

Tenable Nessus•added 2023/09/26 12:00 a.m.•34 views

Siemens InsydeH2O Out-of-bounds Write (CVE-2021-45971)

An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM System Management Mode branch that registers a SWSMI handler that does not...

8.2CVSS7.7AI score0.00279EPSS

SaveExploits0References4

Tenable Nessus•added 2023/09/26 12:00 a.m.•29 views

Siemens InsydeH2O SMM Privilege Escalation (CVE-2020-5953)

A vulnerability exists in System Management Interrupt SWSMI handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT EFIRUNTIMESERVICES pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM escalating...

7.5CVSS7.5AI score0.00284EPSS

SaveExploits0References5

Tenable Nessus•added 2023/09/26 12:00 a.m.•22 views

Siemens InsydeH2O Time-of-check Time-of-use Race Condition (CVE-2022-32955)

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the NvmExpressDxe buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated by using IOMMU...

7CVSS7.3AI score0.00133EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/26 12:00 a.m.•22 views

Siemens InsydeH2O Allocation of Resources Without Limits or Throttling (CVE-2021-41840)

An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of Inclusion of Functionality from an Untrusted Control Sphere. Insyde...

8.2CVSS8.1AI score0.00303EPSS

SaveExploits0References5

Tenable Nessus•added 2023/09/26 12:00 a.m.•26 views

Siemens InsydeH2O Out-of-bounds Write (CVE-2021-42554)

An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a...

8.2CVSS8.1AI score0.00327EPSS

SaveExploits0References5

Tenable Nessus•added 2023/09/26 12:00 a.m.•24 views

Siemens InsydeH2O Time-of-check Time-of-use Race Condition (CVE-2022-32470)

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FwBlockServiceSmm shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated using...

7CVSS7.6AI score0.00133EPSS

SaveExploits0References4

Tenable Nessus•added 2023/09/26 12:00 a.m.•23 views

Siemens InsydeH2O Out-of-bounds Write (CVE-2021-45969)

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM System Management Mode branch that registers a SWSMI handler that does not...

8.2CVSS7.7AI score0.00279EPSS

SaveExploits0References4

CNNVD•added 2023/09/15 12:00 a.m.•9 views

Insyde InsydeH2O 安全漏洞

The RUGGEDCOM APE1808 is a utility-grade application hosting platform that allows you to deploy a range of commercial edge computing and cybersecurity applications in harsh industrial environments. An Inside BIOS vulnerability exists in the Siemens RUGGEDCOM APE1808 product family, which is cause...

4.7CVSS6.9AI score0.00152EPSS

SaveExploits0References5

Tenable Nessus•added 2023/09/14 12:00 a.m.•21 views

Siemens RUGGEDCOM ROX Improper Privilege Management (CVE-2021-37173)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.14.1, RUGGEDCOM ROX RX1400 All versions V2.14.1, RUGGEDCOM ROX RX1500 All versions V2.14.1, RUGGEDCOM ROX RX1501 All versions V2.14.1, RUGGEDCOM ROX RX1510 All versions V2.14.1, RUGGEDCOM ROX RX1511 All versions V2.14.1,...

9CVSS7.5AI score0.01606EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•22 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36753)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•27 views

Siemens RUGGEDCOM ROX Use of a Broken or Risky Cryptographic Algorithm (CVE-2023-36749)

7.4CVSS7.6AI score0.00292EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•22 views

Siemens RUGGEDCOM ROX Cross-Site Request Forgery (CVE-2022-29561)

8.8CVSS8.1AI score0.00276EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•18 views

Siemens RUGGEDCOM ROX Inadequate Encryption Strength (CVE-2023-36748)

6.8CVSS7AI score0.00243EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•15 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36754)

9.1CVSS7.9AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•31 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36751)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•26 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36752)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•16 views

Siemens RUGGEDCOM ROX Improper Input Validation (CVE-2022-29562)

5.3CVSS6.7AI score0.00748EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•26 views

Siemens RUGGEDCOM ROX II Improper Certificate Validation (CVE-2019-17007)

In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

7.5CVSS6.8AI score0.01399EPSS

SaveExploits1References5

Tenable Nessus•added 2023/09/14 12:00 a.m.•14 views

Siemens RUGGEDCOM ROS Buffer Copy Without Checking Size of Input (CVE-2021-31895)

A vulnerability has been identified in RUGGEDCOM i800 All versions V4.3.7, RUGGEDCOM i801 All versions V4.3.7, RUGGEDCOM i802 All versions V4.3.7, RUGGEDCOM i803 All versions V4.3.7, RUGGEDCOM M2100 All versions V4.3.7, RUGGEDCOM M2200 All versions V4.3.7, RUGGEDCOM M969 All versions V4.3.7,...

9.8CVSS8.2AI score0.02285EPSS

SaveExploits0References4

CNVD•added 2023/09/14 12:00 a.m.•84 views

Siemens RUGGEDCOM APE1808 Product Family Inside BIOS Vulnerability

4.7CVSS6.8AI score0.00152EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by